2026 LACMA — Jul 7–11 2025 network access; employee/customer PII notices (count TBD)
Data compromised
May include name, DOB, SSN, DL/gov ID, limited financial/payment card, health-insurance and limited medical fields (varied by person)
Technical writeup
Verified museum notice via MyNewsLA August 26, 2026. Los Angeles County Museum of Art said suspicious activity was detected July 11, 2025; investigation in August 2025 found unauthorized access to a portion of its network from July 7–11, 2025. A data-review firm identified possible exposure of names, DOB, SSN, driver’s license/government IDs, limited financial/payment-card numbers, health-insurance information, and limited medical fields (provider, treatment, diagnosis, dates/locations) varying by individual. Former employee lawsuit alleges delayed individual notice into 2026. No aggregate census published at indexing — recordsAffected 0; companyConfirmed true.
Root cause
Unauthorized third party accessed a portion of LACMA network Jul 7–11, 2025 (detected Jul 11; investigation Aug 2025; public notice ~Aug 2026)